$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft File: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft (raw, json) Hash identifier: 3qzzfiUekSPaz/qGf5tvLU0F0keEreCcdMlHf4aWDG0= Subject key identifier: 4C:18:BD:9D:40:B7:DE:76:65:11:E4:C1:3A:FA:FA:44:1E:1E:75:75 Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 Certificate issuer: /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Certificate serial: 438DE4D51F5EE5D28697C1838F720576D8BF3C69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft Manifest number: 0300 Signing time: Tue 04 Nov 2025 10:00:44 +0000 Manifest this update: Tue 04 Nov 2025 09:55:44 +0000 Manifest next update: Wed 05 Nov 2025 10:32:44 +0000 Files and hashes: 1: 3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (hash: DhWML9LbNA2RRgnB1Kuj0sl9O7DJQowUJBfIgbd8raM=) 2: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl (hash: Jgicd1LBNTmHbLDPIYT9UpOFWaanwkHzOPhOS+BfTso=) 3: 3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (hash: lpESvqoVhwYOSjN4Vj1yVDNhsu54LQTMAxhBhXWO+2I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 10:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8d:e4:d5:1f:5e:e5:d2:86:97:c1:83:8f:72:05:76:d8:bf:3c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Validity Not Before: Nov 4 09:55:44 2025 GMT Not After : Nov 5 10:32:44 2025 GMT Subject: CN=4C18BD9D40B7DE766511E4C13AFAFA441E1E7575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:63:58:25:47:c9:c1:44:60:b7:91:07:74: 6b:87:5a:47:94:7a:54:8c:1c:59:df:9d:11:72:1b: ec:3c:0c:0a:51:34:e4:0c:77:97:57:f8:a2:91:fa: 79:15:9d:fa:4b:ac:1c:b8:26:72:74:02:9d:80:8c: bf:a6:93:ca:7d:5a:1d:9e:9a:16:e5:7a:40:c2:ac: 98:9c:95:4b:21:bc:12:ac:c8:73:58:90:52:6f:d0: 4c:22:d4:a4:42:51:44:c3:fc:0d:89:08:b1:61:e1: 4b:18:37:49:86:80:04:94:a1:af:09:2a:9b:dd:a8: 6b:dc:17:8e:b9:ab:ea:fe:92:84:6d:d2:26:f0:c1: 31:de:c4:82:db:9e:66:1b:23:17:dc:f1:53:e6:d6: 15:70:6f:30:10:0d:ab:e8:62:ff:5a:46:0b:c9:76: b0:50:de:51:f6:02:98:1d:a4:ed:9f:20:7c:f3:b9: 6a:23:0b:a5:f8:56:be:a0:14:79:ea:3b:d1:df:50: 1a:2d:01:a0:f5:7d:c6:7c:fe:e6:b1:c8:99:26:c3: 43:5e:6b:62:a7:e3:16:23:8e:3f:12:8f:7e:d7:e1: a7:ff:42:65:b7:bd:80:4c:f8:83:5c:0b:6e:38:9d: f4:15:46:2d:e5:8e:f1:b0:3c:96:0e:32:bb:f6:75: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:18:BD:9D:40:B7:DE:76:65:11:E4:C1:3A:FA:FA:44:1E:1E:75:75 X509v3 Authority Key Identifier: keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:40:a8:7e:c9:d1:8f:e9:4b:04:a1:da:a8:e0:9e:34:af:31: 9e:a6:38:48:a8:d7:e9:7a:90:11:ea:b5:7b:ad:27:c4:6c:3e: 8c:f4:09:81:bd:0a:7d:65:ce:19:a9:64:0a:36:4c:c8:53:10: 4b:90:be:f1:15:62:27:2c:d0:fe:50:62:32:bd:8b:10:dd:60: e4:ad:9c:f3:6a:c1:1f:37:f1:e3:d3:73:6a:59:ae:42:b6:6c: cb:75:29:49:8d:49:19:b1:f4:dc:56:86:e3:a6:7a:11:ee:17: 3a:8b:60:b5:4b:79:fe:45:65:f6:6a:2e:19:6d:3c:e5:2f:f0: 3c:69:e7:17:90:d3:fb:e1:51:06:71:fd:ef:21:42:fa:57:7b: 9f:c5:ea:d9:5f:e0:1b:87:22:bf:11:01:7c:4b:4a:a9:03:11: 6f:d6:ac:5f:75:bf:d0:b6:fe:aa:bc:ac:d2:2c:ed:7f:de:41: 65:e7:5d:77:35:6a:23:2c:42:fc:aa:37:b5:3a:6f:65:95:7e: e0:30:08:3a:3a:79:44:39:ee:bb:dc:87:8d:1f:47:b1:e1:b1: fb:7e:e2:9b:26:34:8f:c9:f4:ca:28:49:17:a6:dc:29:ae:e3: c6:87:89:14:c0:9d:a8:b4:c5:43:1a:7e:81:f9:75:64:a5:9d: c4:69:e3:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ43k1R9e5dKGl8GDj3IFdti/PGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCQTVDQ0ZCN0JGRTA5NEZDM0E0QTZBRTdENTI3RDM4 RkM2MDhEODAeFw0yNTExMDQwOTU1NDRaFw0yNTExMDUxMDMyNDRaMDMxMTAvBgNV BAMTKDRDMThCRDlENDBCN0RFNzY2NTExRTRDMTNBRkFGQTQ0MUUxRTc1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oGNYJUfJwURgt5EHdGuHWkeU elSMHFnfnRFyG+w8DApRNOQMd5dX+KKR+nkVnfpLrBy4JnJ0Ap2AjL+mk8p9Wh2e mhblekDCrJiclUshvBKsyHNYkFJv0Ewi1KRCUUTD/A2JCLFh4UsYN0mGgASUoa8J KpvdqGvcF465q+r+koRt0ibwwTHexILbnmYbIxfc8VPm1hVwbzAQDavoYv9aRgvJ drBQ3lH2ApgdpO2fIHzzuWojC6X4Vr6gFHnqO9HfUBotAaD1fcZ8/uaxyJkmw0Ne a2Kn4xYjjj8Sj37X4af/QmW3vYBM+INcC244nfQVRi3ljvGwPJYOMrv2dTjJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTBi9nUC33nZlEeTBOvr6RB4edXUwHwYDVR0j BBgwFoAU1Lpcz7e/4JT8Okpq59Un04/GCNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpI M2kvMS9ENEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QkE1Q0NGQjdCRkUwOTRG QzNBNEE2QUU3RDUyN0QzOEZDNjA4RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpIM2kvMS9E NEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW0CofsnRj+lLBKHaqOCeNK8xnqY4SKjX6XqQEeq1e60nxGw+jPQJgb0KfWXO GalkCjZMyFMQS5C+8RViJyzQ/lBiMr2LEN1g5K2c82rBHzfx49NzalmuQrZsy3Up SY1JGbH03FaG46Z6Ee4XOotgtUt5/kVl9mouGW085S/wPGnnF5DT++FRBnH97yFC +ld7n8Xq2V/gG4civxEBfEtKqQMRb9asX3W/0Lb+qrys0iztf95BZedddzVqIyxC /Ko3tTpvZZV+4DAIOjp5RDnuu9yHjR9HseGx+37imyY0j8n0yihJF6bcKa7jxoeJ FMCdqLTFQxp+gfl1ZKWdxGnjLg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:14:27 2025 by rpki-client